1
Contents
Configuring ACLs ························································································································································· 1
Overview ············································································································································································ 1
Applications on the switch ······································································································································ 1
ACL categories ························································································································································· 1
Numbering and naming ACLs ································································································································ 1
Match order ······························································································································································ 2
Rule numbering ························································································································································· 3
Fragments filtering with ACLs ·································································································································· 3
Configuration task list ······················································································································································· 3
Configuring a basic ACL ·················································································································································· 4
Configuring an IPv4 basic ACL ······························································································································ 4
Configuring an IPv6 basic ACL ······························································································································ 4
Configuring an advanced ACL ········································································································································ 5
Configuring an IPv4 advanced ACL······················································································································· 5
Configuring an IPv6 advanced ACL······················································································································· 6
Configuring an Ethernet frame header ACL ··················································································································· 8
Copying an ACL ······························································································································································· 8
Configuring packet filtering with ACLs ··························································································································· 9
Applying an ACL to an interface for packet filtering···························································································· 9
Configuring the applicable scope of packet filtering on a VLAN interface ······················································· 9
Setting the interval for generating and outputting packet filtering logs ··························································· 10
Setting the packet filtering default action ··········································································································· 10
Displaying and maintaining ACLs ································································································································ 10
ACL configuration example ·········································································································································· 11
Network requirements ··········································································································································· 11
Configuration procedure ······································································································································ 11
Verifying the configuration ··································································································································· 12
QoS overview ····························································································································································· 14
QoS service models ······················································································································································· 14
Best-effort service model ······································································································································· 14
IntServ model ························································································································································· 14
DiffServ model ······················································································································································· 14
QoS techniques overview ············································································································································· 15
Deploying QoS in a network ········································································································································ 15
Configuring a QoS policy ········································································································································· 16
Non-MQC approach ····················································································································································· 16
MQC approach ····························································································································································· 16
Configuration procedure diagram ······························································································································· 16
Defining a traffic class ··················································································································································· 17
Configuration guidelines ······································································································································ 17
Configuration procedure ······································································································································ 17
Defining a traffic behavior ············································································································································ 18
Defining a QoS policy ··················································································································································· 19
Applying the QoS policy ··············································································································································· 19
Applying the QoS policy to an interface ············································································································ 20
Applying the QoS policy to a VLAN ··················································································································· 20
Applying the QoS policy globally ······················································································································· 20
Applying the QoS policy to the control plane···································································································· 21
